Breiðholt Upper Secondary School
€9,000
Insufficient technical and organisational measures to ensure information security
Tanggal Keputusan
10 Maret 2020
Wewenang
Icelandic data protection authority ('Persónuvernd')
IS
Sektor
Public Sector and Education
Negara
IS
Hukum
GDPRStatus
FINALDeskripsi
In violation of Art. 32 GDPR, a teacher had sent an e-mail to his students and their parents with an attachment containing data on their well-being, academic performance and social conditions.
Kutipan Hukum
Art. 5 (1)Art. 32
Masalah & Pelanggaran
Insufficient technical and organisational measures to ensure information security